# arena-a78.pages.dev — SUSPICIOUS

> arena-a78.pages.dev hosts a fake giveaway drainer kit stealing crypto wallets. 0/95 VT detections. Check the full report.

## Summary
PhishDestroy identifies arena-a78.pages.dev as an active cryptocurrency giveaway phishing page deploying a drainer kit designed to siphon funds from unwitting victims. The domain mimics legitimate giveaway pages, likely targeting cryptocurrency users by impersonating well-known projects or influencers. No specific brand is confirmed at this stage, but the drainer logic suggests an automated script intercepting wallet connections and prompting users to connect via a fraudulent interface. The campaign is currently live and being served from a Cloudflare Pages endpoint, which provides both hosting and CDN obfuscation to evade detection.

Technical analysis reveals the domain resolves to IP 188.114.96.3 and operates under a Google Trust Services SSL certificate, enhancing its legitimacy appearance. As of latest scan, VirusTotal reports 0 detections out of 95 engines, indicating a low signature presence. The domain was registered through Cloudflare, Inc., leveraging Pages for rapid deployment. While the exact creation date is not publicly available, the infrastructure suggests a recent launch. The domain remains unflagged by Google Safe Browsing and has not appeared on major threat blocklists, indicating it is a fresh threat with limited historical detection.

This domain is currently active and poses a moderate to high risk to cryptocurrency users, particularly those engaging with giveaway promotions. PhishDestroy recommends immediate network and DNS blocking of arena-a78.pages.dev and 188.114.96.3. Users should avoid interacting with any giveaway pages hosted on *.pages.dev, especially those soliciting wallet connections. There is no confirmed takedown activity as of this report; the threat remains live and evolving. Enhanced monitoring for drainer kit signatures and wallet connection prompts is advised.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/85ec3358-a4e7-47fb-b40b-e2f94d0779e6
- PhishDestroy: https://phishdestroy.io/domain/arena-a78.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/arena-a78.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/arena-a78.pages.dev/
Last updated: 2026-03-28